okeplay Privacy
Policy

1. Introduction

okeplay ("okeplay," "we," "us," or "our") is committed to protecting the privacy and personal data of all users of the okeplay platform located at https://okeplay.net (the "Platform"). This Privacy Policy ("Policy") describes how okeplay collects, uses, stores, shares, and protects personal information in connection with your use of the Platform and all associated services.

This Policy is issued in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines and its Implementing Rules and Regulations, as well as other applicable data protection laws and regulations. By registering for an okeplay account or using the Platform in any capacity, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

2. Data Controller

For the purposes of the Data Privacy Act of 2012 and this Policy, okeplay is the personal information controller responsible for the personal data collected through the Platform. okeplay determines the purposes and means of processing your personal data and is accountable for ensuring that such processing complies with applicable data protection laws.

okeplay has designated a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data protection legislation. You may contact the okeplay DPO using the contact details provided in Section 15 of this Policy.

3. Personal Data We Collect

3.1 Data You Provide Directly

When you register for an okeplay account, use the Platform, or contact our support team, you may provide us with the following categories of personal data:

• Identity data: Full legal name, date of birth, gender, nationality;
• Contact data: Residential address (including city — Manila, Cebu, Davao, Quezon City, Makati, or elsewhere in the Philippines), email address, mobile number;
• Account data: Username, password (stored in hashed form), account preferences, communication preferences;
• Identity verification data: Government-issued ID documents (e.g., Philippine passport, SSS ID, PhilHealth ID, driver's license), selfie photographs, proof of address documents;
• Financial data: GCash account details, PayMaya account details, bank account information (BPI, BDO, Metrobank, UnionBank, and other Philippine banks), transaction history, deposit and withdrawal records;
• Communications data: Records of your communications with okeplay support, including live chat transcripts and email correspondence.

3.2 Data Collected Automatically

When you access and use the Platform, okeplay automatically collects certain technical and usage data, including:

• IP address and approximate geographic location;
• Device type, operating system, and browser type and version;
• Pages visited, features used, and time spent on the Platform;
• Game activity, betting history, and session data;
• Referral source and navigation paths;
• Cookie identifiers and similar tracking technologies (see Section 10).

3.3 Data from Third Parties

okeplay may receive personal data about you from third-party sources, including identity verification service providers, payment processors, fraud prevention services, and publicly available sources, where permitted by applicable law. Such data is used to supplement the information we hold about you and to fulfill our legal and regulatory obligations.

4. How We Use Your Personal Data

okeplay uses your personal data for the following purposes:

• Account management: To create, maintain, and administer your okeplay account, verify your identity, and process your registration;
• Service delivery: To provide access to games, process deposits and withdrawals, and deliver the full range of okeplay platform features;
• Payment processing: To facilitate deposits and withdrawals via GCash, PayMaya, and Philippine bank accounts, and to maintain accurate financial records;
• Legal and regulatory compliance: To comply with the Data Privacy Act of 2012, anti-money laundering regulations, PAGCOR licensing requirements, and other applicable Philippine laws;
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, cheating, and other prohibited conduct on the Platform;
• Responsible gaming: To monitor gaming activity, enforce deposit and loss limits, process self-exclusion requests, and identify players who may be experiencing gambling-related harm;
• Customer support: To respond to your inquiries, resolve complaints, and provide technical assistance;
• Platform improvement: To analyze usage patterns, conduct research, and improve the features, performance, and user experience of the okeplay Platform;
• Marketing communications: To send you promotional offers, bonus notifications, and news about okeplay products and services, where you have consented to receive such communications;
• Legal claims: To establish, exercise, or defend legal claims involving okeplay.

5. Legal Basis for Processing

okeplay processes your personal data on the following legal bases as recognized under the Data Privacy Act of 2012 and its Implementing Rules and Regulations:

• Contractual necessity: Processing is necessary to perform the contract between you and okeplay — specifically, to operate your account, process transactions, and deliver gaming services;
• Legal obligation: Processing is required to comply with applicable Philippine laws, including anti-money laundering regulations, gaming licensing requirements, and tax obligations;
• Legitimate interests: Processing is necessary for okeplay's legitimate interests, including fraud prevention, platform security, and improving our services, provided such interests are not overridden by your rights and interests;
• Consent: For certain processing activities, such as sending marketing communications and placing non-essential cookies, okeplay relies on your freely given, specific, and informed consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6. Sharing Your Personal Data

6.1 Service Providers

okeplay may share your personal data with carefully selected third-party service providers who assist in the operation of the Platform. These include identity verification providers, payment processors, cloud hosting providers, customer support platforms, fraud detection services, and analytics providers. All third-party service providers are contractually required to process your data only on okeplay's instructions and to maintain appropriate security measures.

6.2 Regulatory and Law Enforcement Authorities

okeplay may disclose your personal data to regulatory authorities, law enforcement agencies, and other government bodies where required or permitted by applicable Philippine law. This includes disclosures to the Anti-Money Laundering Council (AMLC), PAGCOR, the National Privacy Commission (NPC), and other relevant authorities.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of okeplay's business, your personal data may be transferred to the relevant successor entity. okeplay will notify affected players of any such transfer and ensure that your data continues to be protected in accordance with this Policy.

6.4 No Sale of Personal Data

7. International Data Transfers

Some of okeplay's third-party service providers may be located outside the Philippines. Where personal data is transferred to recipients in other countries, okeplay ensures that appropriate safeguards are in place to protect your data, including contractual clauses that require the recipient to provide a level of data protection equivalent to that required under Philippine law.

By using the okeplay Platform, you acknowledge that your personal data may be transferred to and processed in countries outside the Philippines. okeplay will always take steps to ensure that any such transfers are conducted lawfully and that your data remains protected.

8. Data Retention

okeplay retains your personal data for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, regulatory, accounting, and reporting requirements. The specific retention periods applicable to different categories of personal data are determined by reference to the nature of the data, the purpose for which it is processed, and applicable legal requirements.

As a general guide, okeplay applies the following retention periods:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with anti-money laundering regulations;
• Transaction and financial data: Retained for a minimum of five (5) years from the date of the transaction, as required by Philippine financial regulations;
• KYC and verification documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction;
• Customer support records: Retained for three (3) years from the date of the interaction;
• Marketing preferences and consent records: Retained until you withdraw your consent or for three (3) years from the date of last interaction, whichever is earlier.

When personal data is no longer required, okeplay will securely delete or anonymize it in accordance with our data disposal procedures.

9. Your Data Protection Rights

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by okeplay:

• Right to be informed: You have the right to be informed about how your personal data is collected and processed, as set out in this Policy;
• Right of access: You have the right to request a copy of the personal data okeplay holds about you and information about how it is processed;
• Right to rectification: You have the right to request the correction of inaccurate or incomplete personal data held by okeplay;
• Right to erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to okeplay's legal retention obligations;
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on okeplay's legitimate interests;
• Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another data controller;
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe that okeplay has processed your personal data in violation of applicable data protection law.

10. Cookies and Tracking Technologies

10.1 What Are Cookies

Cookies are small text files placed on your device when you visit the okeplay Platform. They allow okeplay to recognize your device, remember your preferences, and collect information about how you use the Platform. okeplay also uses similar tracking technologies such as web beacons, pixel tags, and local storage objects.

10.2 Types of Cookies We Use

• Strictly necessary cookies: Essential for the Platform to function correctly. These include session cookies that keep you logged in to your okeplay account. These cookies cannot be disabled.
• Performance and analytics cookies: Used to collect information about how visitors use the Platform, including which pages are visited most frequently and whether error messages are received. This data is used in aggregate form to improve the Platform.
• Functionality cookies: Used to remember your preferences, such as your preferred language and display settings, to provide a more personalized experience.
• Marketing cookies: Used to deliver relevant promotional content and to measure the effectiveness of okeplay's marketing campaigns. These cookies are only placed with your consent.

10.3 Managing Cookies

You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling certain cookies may affect the functionality of the okeplay Platform. For more information on managing cookies, refer to your browser's help documentation.

11. Data Security

okeplay implements a comprehensive range of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the okeplay Platform;
• Encryption of sensitive data at rest, including financial information and identity documents;
• Secure, hashed storage of account passwords — okeplay staff cannot view your password in plain text;
• Multi-factor authentication options for account access;
• Regular security audits, vulnerability assessments, and penetration testing;
• Strict access controls limiting employee access to personal data on a need-to-know basis;
• Staff training on data protection and information security best practices;
• Incident response procedures for detecting, reporting, and managing personal data breaches.

While okeplay takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, okeplay will notify you and the National Privacy Commission as required by applicable law.

12. Children's Privacy

If you are a parent or guardian and believe that your child has provided personal data to okeplay, please contact us immediately using the details in Section 15 so that we can take appropriate action.

13. Third-Party Links

The okeplay Platform may contain links to third-party websites or services. This Policy applies only to the okeplay Platform and does not cover the privacy practices of any third-party websites. okeplay is not responsible for the content or privacy practices of third-party sites and encourages you to review the privacy policies of any third-party sites you visit.

14. Updates to This Privacy Policy

okeplay reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the features of the Platform. When material changes are made, okeplay will notify registered players by email or by posting a prominent notice on the Platform. The date of the most recent revision is indicated at the top of this page.

Your continued use of the okeplay Platform following the posting of an updated Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree to the updated Policy, you must cease using the Platform and may request the closure of your account.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or okeplay's data processing practices, please contact our Data Protection Officer. All data-related inquiries are handled confidentially and in accordance with the Data Privacy Act of 2012.

okeplay aims to respond to all privacy-related requests within thirty (30) days of receipt. For urgent account security matters, please use the live chat feature on the Platform for the fastest response.

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data protection rights have been violated. Information about the NPC and how to file a complaint is available through official Philippine government channels.